Specific operations: right click on my computer, manage \\ local users and groups \\ users, create a new account, such as: user, the default is the least privileged account, only USER permissions, right click on the USER point attribute, point subordinate, can be It adds other permissions, here to find out the scope of each permission: Administrator, for superuser privileges, if you give the USER user this permission, it is equivalent to the Aadministrator user. Administrator group, by default, users in Administrators have unrestricted full access to the computer/domain. The default permissions assigned to this group allow full control of the entire system. Therefore, only trusted personnel can become members of the group. Power Users, Power Users groups, Power Users can perform any operating system tasks other than those reserved for the Administrators group. The default permissions assigned to the Power Users group allow members of the Power Users group to modify settings for the entire computer. However, Power Users does not have permission to add itself to the Administrators group. In the permission settings, the permissions of this group are second only to Administrators. Users, normal user groups, users of this group cannot make intentional or unintentional changes. Therefore, users can run authenticated applications, but not most legacy applications. The Users group is the most secure group because the default permissions assigned to the group do not allow members to modify operating system settings or user profiles. The Users group provides one of the most secure program execution environments. On NTFS-formatted volumes, the default security settings are designed to prevent members of this group from compromising the integrity of the operating system and installed programs. Users cannot modify system registry settings, operating system files, or program files. Users can shut down the workstation but cannot shut down the server. Users can create local groups, but only local groups that they create themselves. Guests, guest groups, by default, guests have equal access to members of ordinary users, but the guest account has more restrictions. Everyone, as the name suggests, all users, all users on this computer belong to this group. In fact, there is also a group that is very common. It has the same permissions as Administrators, but it does not allow any users to join. When viewing the user group, it will not be displayed. It is SYSTEM group. The permissions required for system and system level services to function properly are assigned to it. Since this group has only one user SYSTEM, it may be more appropriate to classify the group as a user. XP system has an administrator user administrator by default. This user is always there. Under normal circumstances, it is invisible. You need to log out the user and press ctrl+alt+del twice before logging in. Enter the login input box and enter adminisrtrator. Enter this user. Therefore, users who have established administrative rights will not affect the real system administrator users.